diff options
author | Guillem Jover <guillem@debian.org> | 2016-11-10 16:42:13 +0100 |
---|---|---|
committer | Guillem Jover <guillem@debian.org> | 2016-11-11 02:34:17 +0100 |
commit | 89b80a3da82ea5b10b1500d6c531432d0ce585a5 (patch) | |
tree | 6428c0c8e9f26f748f4e5e30ad4e6322acf006e8 /debian | |
parent | 8ce8524a7268525b27e04cab550e92edd9ea18a5 (diff) | |
download | dpkg-89b80a3da82ea5b10b1500d6c531432d0ce585a5.tar.gz |
dpkg: Fix use after free issue on error summary
We are releasing the dpkg database now after running the commands, which
means that the postponed error reporting summary was trying to print
messages that had already been freed from the database memory pool.
Duplicate the passed strings so that we are impervious to the database
life-cycle.
Regression introduced in commit 3404fd24ef8020b4d6dc17adb82d7e6c035d90dc.
Closes: #843874
Diffstat (limited to 'debian')
-rw-r--r-- | debian/changelog | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/debian/changelog b/debian/changelog index ff4096625..3169791a7 100644 --- a/debian/changelog +++ b/debian/changelog @@ -7,6 +7,10 @@ dpkg (1.18.14) UNRELEASED; urgency=medium - Do not set PIE options if they have been negated, and do not reset them if they have been requested. Closes: #843791, #843826 + * Fix use after free error in dpkg. It was trying to print messages that + had already been freed as part of the database memory pool, causing in + some cases segfaults when reporting the error summary at the end. + Regression introduced in dpkg 1.18.11. Closes: #843874 * Test suite: - Do not fail tests on missing fakeroot, just skip them. * Build system: |